$ rpki-client -vvf repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft File: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft (raw, json) Hash identifier: UaKLiZzGlGoVtfNteZka1GfHx0bfiT9SPtHzfHGBRwM= Subject key identifier: E1:E7:41:E4:DC:A7:F8:38:71:70:3A:4A:3B:6A:67:D4:29:A2:E5:A9 Authority key identifier: 98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 Certificate issuer: /CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Certificate serial: 1D4A8913B8C089C8140B6AC396AE3B1D01832165 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft Manifest number: 012D Signing time: Tue 24 Mar 2026 14:41:21 +0000 Manifest this update: Tue 24 Mar 2026 14:36:21 +0000 Manifest next update: Fri 27 Mar 2026 19:05:21 +0000 Files and hashes: 1: 3135372e31302e36362e302f32332d3234203d3e20313532333531.roa (hash: 2ReMekYvbev7jjxFECsJnqLr+wMK4uSY0sQzIGWAR3Y=) 2: 3135372e31302e36372e302f32342d3234203d3e20313532333531.roa (hash: EqIrxJr5cRLahMi6fEAneUU1VnH8z0/jf+Oj0RPBMWg=) 3: 3135372e31302e36362e302f32342d3234203d3e20313532333531.roa (hash: j5FofZXIJd4POcdB4ESAE0x/xLx8UGEYcWSUY/DWNHw=) 4: 9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl (hash: oHVBFVCceQtWJvCf9EDHiHW4S9X1ahWp3ZZE8GCdIaM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:4a:89:13:b8:c0:89:c8:14:0b:6a:c3:96:ae:3b:1d:01:83:21:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1 Validity Not Before: Mar 24 14:36:21 2026 GMT Not After : Mar 27 19:05:21 2026 GMT Subject: CN=E1E741E4DCA7F83871703A4A3B6A67D429A2E5A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:04:11:08:49:46:36:03:91:e8:aa:e6:e7: 8a:43:d5:a4:09:bc:8b:cd:ea:96:ef:aa:4f:ce:10: 04:59:ef:35:73:61:86:4e:ed:d9:ce:19:87:97:3f: 1a:b3:b9:28:92:7a:47:58:6a:fd:66:31:b0:e2:9c: 6e:2d:97:c2:6a:5b:5c:19:36:56:93:34:db:46:e2: 7b:a0:de:b2:4e:18:e2:da:29:81:d8:77:6d:a2:2e: 23:d5:5d:f4:09:92:95:ef:12:36:00:67:00:1b:a8: d6:86:cd:1e:24:51:fc:d2:04:7a:e3:45:70:dc:2b: db:e7:c2:12:d8:9b:cb:d0:b7:b7:79:13:20:62:cf: b5:49:2b:5a:40:04:d1:51:bb:68:46:04:7c:5d:11: a7:b4:0d:69:ee:ce:51:5b:02:88:55:b9:54:ed:65: 49:0f:28:de:e3:92:4c:3d:4b:81:2d:1c:78:ce:0c: 5d:af:68:93:aa:7d:98:66:92:a0:aa:14:13:0f:f9: 00:07:3b:9d:2d:d1:b9:50:74:7c:c2:79:4d:17:d8: 5a:53:52:5b:96:c8:85:b6:81:d5:58:bd:50:ee:c9: bf:5d:f0:cd:01:6d:02:37:bb:59:e4:34:7b:eb:73: fc:17:ca:41:a2:04:1b:a7:59:f7:27:b3:5a:05:bf: 9b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E7:41:E4:DC:A7:F8:38:71:70:3A:4A:3B:6A:67:D4:29:A2:E5:A9 X509v3 Authority Key Identifier: keyid:98:02:D7:CD:84:EC:A3:7A:2E:C2:D6:37:8D:CA:35:B1:11:3F:5D:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80c266e6-0b84-431f-9e74-06d3d93e9704/0/9802D7CD84ECA37A2EC2D6378DCA35B1113F5DD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:a3:f1:b2:61:83:b0:52:f1:85:69:29:db:d2:ef:de:f3:9f: 05:68:6c:08:85:86:cd:b3:d8:8f:7c:e6:7e:ce:5a:84:0a:02: df:2f:51:e6:c3:30:22:53:95:f0:c4:3b:07:1e:2d:ef:3f:f3: ec:13:39:08:b8:3c:60:93:b2:bc:62:22:90:71:e7:db:c9:2e: 2c:c6:2a:ba:81:b9:e2:5a:a7:a8:ea:e8:05:84:56:ad:c8:ed: dd:76:b1:15:c5:1a:3c:5b:3f:23:04:cd:fc:a7:ae:e6:28:d0: bd:ab:97:a7:0c:74:2d:94:7e:cc:29:a2:48:62:48:de:42:51: c5:c4:ab:fc:dd:67:c1:b2:e3:aa:95:64:bc:95:41:60:9f:49: 3e:7c:2f:c2:9f:1f:d2:60:cb:c1:ec:33:5f:3e:99:af:16:1d: 04:5b:14:39:09:7d:07:2a:06:0d:c2:c8:e7:00:de:b6:04:86: e1:31:89:09:d3:c0:1e:26:4f:23:99:4a:4f:9d:52:2b:35:6c: 2f:ea:f5:d4:b9:26:2c:f3:9f:98:10:60:0f:b7:a2:31:a6:e5: 15:d5:b9:ba:f8:6d:c2:3a:5f:fd:88:e7:81:11:74:17:30:9c: d2:fd:20:d0:7d:82:d6:2f:6f:0c:0a:b2:9b:6a:de:f1:a7:a8: ba:8c:f1:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHUqJE7jAicgUC2rDlq47HQGDIWUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjEx MTNGNUREMTAeFw0yNjAzMjQxNDM2MjFaFw0yNjAzMjcxOTA1MjFaMDMxMTAvBgNV BAMTKEUxRTc0MUU0RENBN0Y4Mzg3MTcwM0E0QTNCNkE2N0Q0MjlBMkU1QTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6mwQRCElGNgOR6Krm54pD1aQJ vIvN6pbvqk/OEARZ7zVzYYZO7dnOGYeXPxqzuSiSekdYav1mMbDinG4tl8JqW1wZ NlaTNNtG4nug3rJOGOLaKYHYd22iLiPVXfQJkpXvEjYAZwAbqNaGzR4kUfzSBHrj RXDcK9vnwhLYm8vQt7d5EyBiz7VJK1pABNFRu2hGBHxdEae0DWnuzlFbAohVuVTt ZUkPKN7jkkw9S4EtHHjODF2vaJOqfZhmkqCqFBMP+QAHO50t0blQdHzCeU0X2FpT UluWyIW2gdVYvVDuyb9d8M0BbQI3u1nkNHvrc/wXykGiBBunWfcns1oFv5tZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4edB5Nyn+DhxcDpKO2pn1Cmi5akwHwYDVR0j BBgwFoAUmALXzYTso3ouwtY3jco1sRE/XdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGMyNjZlNi0wYjg0LTQzMWYtOWU3NC0wNmQzZDkzZTk3MDQvMC85ODAyRDdDRDg0 RUNBMzdBMkVDMkQ2Mzc4RENBMzVCMTExM0Y1REQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1QjExMTNG NUREMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBjMjY2ZTYtMGI4NC00MzFmLTll NzQtMDZkM2Q5M2U5NzA0LzAvOTgwMkQ3Q0Q4NEVDQTM3QTJFQzJENjM3OERDQTM1 QjExMTNGNUREMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqj8bJhg7BS8YVpKdvS797znwVobAiFhs2z 2I985n7OWoQKAt8vUebDMCJTlfDEOwceLe8/8+wTOQi4PGCTsrxiIpBx59vJLizG KrqBueJap6jq6AWEVq3I7d12sRXFGjxbPyMEzfynruYo0L2rl6cMdC2Ufswpokhi SN5CUcXEq/zdZ8Gy46qVZLyVQWCfST58L8KfH9Jgy8HsM18+ma8WHQRbFDkJfQcq Bg3CyOcA3rYEhuExiQnTwB4mTyOZSk+dUis1bC/q9dS5Jizzn5gQYA+3ojGm5RXV ubr4bcI6X/2I54ERdBcwnNL9INB9gtYvbwwKsptq3vGnqLqM8eI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:20:32 2026 by rpki-client